Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/3H56-cJvOAukkpNV1yjV1hzdQbs.roa
File: 3H56-cJvOAukkpNV1yjV1hzdQbs.roa (raw, json)
Hash identifier: /j/TzWKCXf+VUNSWHhSP7VMZtWufzaD+0Vxexs+cCKo=
Subject key identifier: DC:7E:7A:F9:C2:6F:38:0B:A4:92:93:55:D7:28:D5:D6:1C:DD:41:BB
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01856FA712F2D73C13323E346E4622937EA8
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/3H56-cJvOAukkpNV1yjV1hzdQbs.roa
Signing time: Sun 01 Jan 2023 23:24:58 +0000
ROA not before: Sun 01 Jan 2023 23:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24632
IP address blocks: 195.184.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:12:f2:d7:3c:13:32:3e:34:6e:46:22:93:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jan 1 23:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc7e7af9c26f380ba4929355d728d5d61cdd41bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:b0:61:2f:8e:54:cc:9a:1c:05:4f:ac:b7:
44:06:7a:68:40:11:14:4d:b9:4f:60:5a:61:42:d4:
29:a0:be:94:04:6a:6c:a7:43:45:38:ae:12:2a:46:
e6:83:a2:72:83:b1:48:76:1c:b9:ec:fa:96:8e:bb:
50:cb:32:77:8b:27:11:2c:73:eb:9b:ee:ae:27:5a:
6e:df:0c:e5:90:cd:79:ed:38:40:09:63:41:79:9a:
b7:71:e2:f0:08:63:2d:7a:b6:c6:9a:10:08:0f:e1:
1e:c6:66:a9:b2:7b:2f:23:31:4d:11:41:f7:3f:05:
38:59:ff:a0:0e:50:0b:36:e3:b9:f1:f9:70:80:4f:
59:6e:2e:08:20:d8:e7:be:35:70:fb:8a:f9:15:bd:
79:02:22:43:b4:96:5d:4a:75:f0:36:0d:aa:39:a3:
14:56:2f:d0:8a:1f:95:a0:f2:5a:47:83:7d:b8:d2:
ee:73:a4:07:54:f5:47:20:88:3d:37:c1:9d:47:0b:
68:37:c2:8a:6d:e5:ce:a5:6e:a7:3f:62:af:d1:5b:
c1:53:de:26:c3:37:6b:36:08:3c:a3:f9:fd:ae:c4:
92:8f:9e:3c:71:21:4c:85:f5:0a:4a:dc:13:5f:8c:
e5:04:23:d8:9f:fd:81:d0:4d:b5:14:40:e3:9f:1f:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:7A:F9:C2:6F:38:0B:A4:92:93:55:D7:28:D5:D6:1C:DD:41:BB
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/3H56-cJvOAukkpNV1yjV1hzdQbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.94.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a4:ec:a3:d7:b0:61:c3:72:34:17:bd:5b:ec:33:6e:ee:4b:
4a:c0:b2:43:56:13:6a:ec:36:66:97:fd:d2:23:04:96:c2:8c:
7a:45:31:f3:4f:14:03:bb:86:bc:6c:8e:b3:7b:4c:5c:f3:63:
b4:0b:c4:5e:3d:7d:5c:29:31:57:d0:cf:b1:9c:47:b5:66:d4:
b0:0f:73:07:0a:3a:a8:83:04:2a:68:25:93:c4:b3:08:a4:ad:
09:b1:8c:10:93:2b:a3:d8:ac:ac:ea:c4:fd:02:f6:c6:f4:62:
ec:c0:5b:b1:79:6b:ba:c5:fd:41:70:63:78:f5:d8:08:5b:df:
f5:c4:2b:b1:1c:69:fa:e8:26:1a:24:7d:ab:b2:62:40:fa:ef:
4f:23:c9:37:29:bd:3f:99:11:da:95:49:a8:df:70:8e:c1:6d:
99:14:bd:2c:92:ab:0c:26:fd:c5:19:fe:5b:4d:45:ea:3f:0b:
6c:ab:86:2b:b1:9c:a5:84:a7:72:26:c6:34:cc:b1:68:43:c0:
f9:56:89:37:ec:e7:ae:4f:70:36:89:f9:ad:16:a1:60:a4:db:
53:b9:8f:b1:40:99:12:bf:1b:e1:b1:ab:82:27:53:8c:b2:f1:
38:7a:d6:86:cd:42:54:e8:df:a3:98:0e:a4:c3:d4:8e:66:06:
8e:a9:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:31:03 2025 by rpki-client